| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
From: ihcteam at altern.org (IHC team)
Subject: Paper Release
Hi all security experts,
We, IHC team, are security experts trying to secure the internet from
the inside.
That's why we often release papers about security and exploitation.
That time, we wrote from scratch another paper about udp smurfing.
We are pleased to teach you new things !
Regards,
for IHC team,
Lapeluche
<html xmlns:o="urn:schemas-microsoft-com:office:office"
xmlns:w="urn:schemas-microsoft-com:office:word"
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 9">
<meta name=Originator content="Microsoft Word 9">
<link rel=File-List href="./Smurf_fichiers/filelist.xml">
<title>Smurf </title>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Author>boss</o:Author>
<o:LastAuthor>boss</o:LastAuthor>
<o:Revision>3</o:Revision>
<o:TotalTime>786</o:TotalTime>
<o:Created>2004-04-26T20:28:00Z</o:Created>
<o:LastSaved>2004-04-26T20:29:00Z</o:LastSaved>
<o:Pages>3</o:Pages>
<o:Words>1541</o:Words>
<o:Characters>8785</o:Characters>
<o:Company>n/a</o:Company>
<o:Lines>73</o:Lines>
<o:Paragraphs>17</o:Paragraphs>
<o:CharactersWithSpaces>10788</o:CharactersWithSpaces>
<o:Version>9.2812</o:Version>
</o:DocumentProperties>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:HyphenationZone>21</w:HyphenationZone>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:536871559 0 0 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
h1
{mso-style-next:Normal;
margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
text-align:center;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:1;
font-size:10.0pt;
mso-bidi-font-size:8.0pt;
font-family:Verdana;
color:gray;
mso-font-kerning:0pt;
font-weight:bold;}
h2
{mso-style-next:Normal;
margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
text-align:center;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:2;
font-size:12.0pt;
mso-bidi-font-size:8.0pt;
font-family:Verdana;
color:gray;
font-weight:bold;}
h3
{mso-style-next:Normal;
margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
text-align:center;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:3;
border:none;
mso-border-top-alt:dotted windowtext 3.0pt;
mso-border-bottom-alt:dotted windowtext 3.0pt;
padding:0cm;
mso-padding-alt:1.0pt 0cm 1.0pt 0cm;
font-size:20.0pt;
mso-bidi-font-size:12.0pt;
font-family:Verdana;
color:black;
font-weight:bold;}
p.MsoBodyText, li.MsoBodyText, div.MsoBodyText
{margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
font-size:8.0pt;
font-family:Verdana;
mso-fareast-font-family:"Times New Roman";
mso-bidi-font-family:"Times New Roman";
color:gray;}
p.MsoBodyText2, li.MsoBodyText2, div.MsoBodyText2
{margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
font-size:8.0pt;
mso-bidi-font-size:9.0pt;
font-family:Verdana;
mso-fareast-font-family:"Times New Roman";
mso-bidi-font-family:"Courier New";
color:black;}
p.MsoBodyText3, li.MsoBodyText3, div.MsoBodyText3
{margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:8.0pt;
mso-bidi-font-size:12.0pt;
font-family:Verdana;
mso-fareast-font-family:"Times New Roman";
mso-bidi-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
p
{margin-right:0cm;
mso-margin-top-alt:auto;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
pre
{margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt
412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt;
font-size:10.0pt;
font-family:"Courier New";
mso-fareast-font-family:"Courier New";}
span.titre1
{mso-style-name:titre1;
mso-ansi-font-size:9.0pt;
mso-bidi-font-size:9.0pt;
mso-ascii-font-family:Verdana;
mso-hansi-font-family:Verdana;
color:#485E9E;
font-weight:bold;}
span.textit
{mso-style-name:textit;
font-style:italic;}
span.textbf
{mso-style-name:textbf;
font-weight:bold;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=FR link=blue vlink=purple style='tab-interval:35.4pt'>
<div class=Section1>
<p class=MsoNormal align=right
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:right'><span
style='font-family:Verdana;color:black'>Ecris par
<b>Lapeluche<o:p></o:p></b></span></p>
<p class=MsoNormal align=right
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:right'><span
style='font-family:Verdana;color:black'>Membre de
l?association <b>IHCTEAM.org</b></span><b><span
style='font-family:Verdana;
color:white'> </span></b><b><span
style='font-size:8.0pt;mso-bidi-font-size:
12.0pt;font-family:Verdana;color:white'><o:p></o:p></span></b></p>
<div style='border-top:solid windowtext
3.0pt;border-left:none;border-bottom:
solid windowtext 3.0pt;border-right:none;padding:1.0pt 0cm 1.0pt 0cm'>
<h3 style='border:none;mso-border-top-alt:solid windowtext
3.0pt;mso-border-bottom-alt:
solid windowtext 3.0pt;padding:0cm;mso-padding-alt:1.0pt 0cm 1.0pt
0cm'>LE
SMURFING <span style='font-weight:normal'>?Etude attaque d?fense</span>
</h3>
</div>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><span
style='font-size:8.0pt;font-family:Verdana;
color:gray'>-----------------------------------------------------------
-------------------------------------------------------------<o:p></o:p
></span></p>
<h2>Position d?attaque</h2>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><span
style='font-size:8.0pt;font-family:Verdana;
color:gray'>-----------------------------------------------------------
-------------------------------------------------------------<o:p></o:p
></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><u><span
style='mso-bidi-font-size:8.0pt;font-family:Verdana;color:gray'>I- La
th?orie,
explication :</span></u></b><span
style='font-size:8.0pt;font-family:Verdana;
color:gray'><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Aujourd?hui nous
allons
?tudier ce qu?est le smurf.<span style="mso-spacerun: yes">?
</span>Cat?goris?
dans la rubrique du Denial of Services de pars ses m?thodes de
? barbares ?.<o:p></o:p></span></p>
<table border=1 cellspacing=0 cellpadding=0 width=1230
style='width:922.4pt;
margin-left:3.5pt;border-collapse:collapse;border:none;mso-border-alt:s
olid windowtext .5pt;
mso-padding-alt:0cm 3.5pt 0cm 3.5pt'>
<tr style='height:33.65pt'>
<td width=1230 style='width:922.4pt;border:solid windowtext
.5pt;background:
#3366FF;padding:0cm 3.5pt 0cm 3.5pt;height:33.65pt'>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><span
style='font-size:8.0pt;mso-bidi-font-size:
12.0pt;font-family:Verdana;color:white'>DoS ou Denial of Service est
une
forme d?attaque ? distance qui consiste ? envoyer et ? submerger une
machine
victime de paquets plus ou moins gros.</span></b><span
style='font-size:8.0pt;
font-family:Verdana;color:white'><o:p></o:p></span></p>
</td>
</tr>
</table>
<p class=MsoBodyText>Beau terme que le ? Smurf ?, mais que
veut-il
dire, et comment fonctionne-t-il, autant de questions que nous
essayerons
d??lucider dans ce petit article.</p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Le smurf consiste
?
envoyer une bonnes quantit?s d?informations ( paquets ) sous le nom de
la futur
victime ? un r?seau Broadcast. Ces paquets auront comme type un
8.<o:p></o:p></span></p>
<p class=MsoBodyText>Vous trouverez dans la RFC un tableau comme
celui-ci qui
vous permettra de comprendre les diff?rents types de requ?tes. </p>
<table border=0 cellspacing=0 cellpadding=0 width="100%"
bgcolor="#eff2fb"
style='width:100.0%;mso-cellspacing:0cm;background:#EFF2FB'>
<tr>
<td style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span class=titre1><span
style='font-size:9.0pt;font-family:Verdana;color:white'>Signification
des
messages ICMP</span></span><span
style='font-size:8.5pt;font-family:Verdana;
color:white'> <o:p></o:p></span></p>
</td>
</tr>
</table>
<p style='margin:0cm;margin-bottom:.0001pt;background:#3366FF'><span
style='font-size:8.5pt;font-family:Verdana;color:white;display:none;mso
-hide:
all'><![if !supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<table border=0 cellpadding=0 bgcolor="#afbbef"
style='mso-cellspacing:1.5pt;
background:#AFBBEF'>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Type<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Code<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Message<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Signification du
message<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><b><span
style='font-size:8.5pt;
font-family:Verdana;color:red'>8<o:p></o:p></span></b></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><b><span
style='font-size:8.5pt;
font-family:Verdana;color:red'>0<o:p></o:p></span></b></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><b><span
style='font-size:8.5pt;
font-family:Verdana;color:red'>Demande
d'ECHO<o:p></o:p></span></b></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><b><span
style='font-size:8.5pt;
font-family:Verdana;color:red'>Ce message est utilis? lorsqu'on
utilise la
commande <i>PING</i>. Cette commande, permettant de tester le r?seau,
envoie
un datagramme ? un destinataire et lui demande de le
restituer<o:p></o:p></span></b></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le r?seau n'est pas
accessible<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>1<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>La machine n'est pas
accessible<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>2<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le protocole n'est pas
accessible<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le port n'est pas
accessible<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>4<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Fragmentation n?cessaire mais
impossible ?
cause du drapeau (flag) DF<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>5<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le routage a
?chou?<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>6<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>R?seau inconnu<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>7<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Machine
inconnue<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>8<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Machine non connect?e au r?seau
(inutilis?)<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>9<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Communication avec le r?seau
interdite<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>10<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Communication avec la machine
interdite<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>11<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>R?seau inaccessible pour ce
service<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>12<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Machine inaccessible pour ce
service<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>11<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>destinataire
inaccessible<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Communication interdite
(filtrage)<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>4<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Source Quench<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le volume de donn?es envoy? est trop
important, le routeur envoie ce message pour pr?venir qu'il sature
afin de
demander de r?duire la vitesse de transmission<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>5<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Redirection pour un
h?te<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le routeur remarque que la route d'un
ordinateur
n'est pas optimale et envoie l'adresse du routeur ? rajouter dans la
table de
routage de l'ordinateur<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>5<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>1<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Redirection pour un h?te et un
service donn?<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le routeur remarque que la route d'un
ordinateur n'est pas optimale pour un service donn? et envoie
l'adresse du
routeur ? rajouter dans la table de routage de
l'ordinateur<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>5<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>2<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Redirection pour un
r?seau<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le routeur remarque que la route d'un
r?seau
entier n'est pas optimale et envoie l'adresse du routeur ? rajouter
dans la
table de routage des ordinateurs du r?seau<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>5<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>3<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Redirection pour un r?seau et un
service
donn?<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Le routeur remarque que la route d'un
r?seau
entier n'est pas optimale pour un service donn? et envoie l'adresse du
routeur ? rajouter dans la table de routage des ordinateurs du
r?seau<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>11<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Temps d?pass?<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message est envoy? lorsque le
temps de
vie d'un datagramme est d?pass?. L'en-t?te du datagramme est renvoy?
pour que
l'utilisateur sache quel datagramme a ?t?
d?truit<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>11<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>1<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Temps de r?-assemblage de fragment
d?pass?<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message est envoy? lorsque le
temps de
r?-assemblage des fragments d'un datagramme est
d?pass?.<o:p></o:p></span></p>
</td>
</tr>
<tr style='height:1.75pt'>
<td style='background:#3366FF;padding:.75pt .75pt .75pt
.75pt;height:1.75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>12<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt
.75pt;height:1.75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt
.75pt;height:1.75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>en-t?te erronn?<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt
.75pt;height:1.75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message est envoy? lorsqu'un champ
d'un
en-t?te est erronn?. La position de l'erreur est
retourn?e<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>13<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Timestamp
request<o:p></o:p></span></p>
</td>
<td style='background:#3366FF;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Une machine demande ? une autre son
heure et
sa date syst?me (universelle)<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>14<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Timestamp reply<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>La machine r?ceptrice donne son heure
et sa
date syst?me afin que la machine ?mettrice puisse d?terminer le temps
de
transfert des donn?es<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>15<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Demande d'adresse
r?seau<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message permet de demander au
r?seau une
adresse IP<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>16<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>r?ponse d'adresse
r?seau<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message r?pond au message
pr?c?dent<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>17<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Demande de masque de
sous-r?seau<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message permet de demander au
r?seau
unmasque de sous-r?seau<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>18<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>r?ponse de masque de
sous-r?seau<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Ce message r?pond au message
pr?c?dent<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>17<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>Timestamp reply<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='background:#3366FF'><span
style='font-size:8.5pt;
font-family:Verdana;color:white'>La machine r?ceptrice donne son heure
et sa
date syst?me afin que la machine ?mettrice puisse d?terminer le temps
de
transfert des donn?es<o:p></o:p></span></p>
</td>
</tr>
</table>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Voici le type de
paquets
nous int?ressants le n?8 :<o:p></o:p></span></p>
<table border=0 cellpadding=0 bgcolor="#afbbef"
style='mso-cellspacing:1.5pt;
background:#AFBBEF'>
<tr>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><span
style='font-size:8.5pt;font-family:Verdana'>8<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><span
style='font-size:8.5pt;font-family:Verdana'>0<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><span
style='font-size:8.5pt;font-family:Verdana'>Demande
d'ECHO<o:p></o:p></span></p>
</td>
<td style='background:#ECF0FA;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><span
style='font-size:8.5pt;font-family:Verdana'>Ce
message est utilis? lorsqu'on utilise la commande <i>PING</i>. Cette
commande, permettant de tester le r?seau, envoie un datagramme ? un
destinataire et lui demande de le restituer<o:p></o:p></span></p>
</td>
</tr>
</table>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt;mso-bidi-font-size:8.0pt;font-family:Verdana;
color:gray'>? Bon c?est bien mais je comprend toujours pas ce
qu?est le </span></b><b><span
style='font-size:10.0pt;mso-bidi-font-size:8.0pt;font-family:Verdana;
color:red'>Smurfing</span></b><b><span
style='font-size:10.0pt;mso-bidi-font-size:
8.0pt;font-family:Verdana;color:gray'> ?,
explication :<o:p></o:p></span></b></p>
<p class=MsoBodyText3><b><u><![if
!supportEmptyParas]> <![endif]><o:p></o:p></u></b></p>
<p class=MsoBodyText3><b><u>D?finition :</u></b>Le smurf consiste
?
envoyer un paquets d?informations spoof?s c?est ? dire au nom de la
victime </p>
<p class=MsoBodyText3 align=center style='text-align:center'>? une
adresse
broadcasts qui va entra?ner une r?ponse de tous les ordinateurs du
r?seau ? la
victime. R?sultat, bandes satur?s, d?connexion rapide et concise
</p>
<p class=MsoBodyText3 align=center style='text-align:center'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></p>
<p class=MsoBodyText3 align=center style='text-align:center'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></p>
<p class=MsoBodyText3 align=center style='text-align:center'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></p>
<table border=0 cellspacing=1 cellpadding=0 width="99%"
bgcolor="#00ccff"
style='width:99.8%;mso-cellspacing:.7pt;background:#00CCFF'>
<tr>
<td width="99%" style='width:99.84%;background:#3366FF;padding:.75pt
.75pt .75pt .75pt'>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><i><span
style='font-size:14.0pt;mso-bidi-font-size:
9.0pt;color:white'>RAPPEL :<o:p></o:p></span></i></b></p>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><span
style='font-size:8.0pt;mso-bidi-font-size:
9.0pt;font-family:Verdana;mso-bidi-font-family:"Courier
New";color:white'>le
protocole TCP/IP, dans son adressage a ce qu'on appelle un broadcast
sur le
r?seau, il s'agit en g?n?ral de la derni?re adresse IP du r?seau
parfois
appel?e 255.255.255.255. Lorsqu'un paquet est ?mis vers une adresse de
broadcast, toutes les machines r?pondent ? ce signal, par exemple un
ping
ICMP vers cette adresse entra?ne plusieurs
r?ponses.<o:p></o:p></span></b></p>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><b><span
style='font-size:8.0pt;mso-bidi-font-size:
12.0pt;font-family:Verdana;color:white'>Nous avons besoin sur r?seau
informatique comme audio, d?un amplificateur et distributeur, qui
redirige et
amplifie les donn?es entrantes sur tout le
r?seau.<o:p></o:p></span></b></p>
</td>
</tr>
</table>
<p class=MsoBodyText3 align=center style='text-align:center'><span
style='color:white'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoBodyText3 align=center
style='text-align:center;background:#3366FF'><span
style='color:white'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoBodyText3 align=center
style='text-align:center;background:#3366FF'><span
style='mso-bidi-font-size:8.0pt;color:white'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<table border=0 cellspacing=1 cellpadding=0 width="99%"
bgcolor="#00ccff"
style='width:99.8%;mso-cellspacing:.7pt;background:#00CCFF'>
<tr>
<td width="99%" style='width:99.84%;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center;background:#3366FF'><b><span
style='font-size:8.0pt;
mso-bidi-font-size:7.5pt;font-family:Verdana;color:white'>Le smurf est
donc
une attaque ICMP Flood sauf qu'ici avec un seul paquet vous cr?ez une
masse
extr?mement importante de <u>datagrammes reponse ICMP</u> et vous
profitez de
la bande passante des broadcast !</span></b><b><span
style='font-size:8.0pt;
mso-bidi-font-size:12.0pt;font-family:Verdana;color:white'><o:p></o:p><
/span></b></p>
</td>
</tr>
</table>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Mais ce qui est
magnifique avec cette attaque c?est non seulement qu?elle est peut ?tre
d?sastreuse pour un serveur, une personne mais aussi qu?elle allie, le
denial
of service et l?envoi de paquets ping, <o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>le spoofing au
sein de
l??metteurs de paquets et la gestion des
broadcasts.<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Le meilleur moyen
ainsi
de faire crasher une personne, un serveur en restant
prot?g?.<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><u><span
style='mso-bidi-font-size:8.0pt;font-family:Verdana;color:gray'>II- La
pratique, explication :<o:p></o:p></span></u></b></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Tout d?abord vous
comprendrez qu?il nous faut l?adresse ip de la victime, pour cela le
hacker la
r?cup?rera comme il le souhaite. Ensuite, il vous faut ? votre
disposition des
adresses de Broadcasts n?cessaires pour l?attaque, notre hacker pourra
s?en
procurer sur diff?rents site web notamment celui-ci (<a
href="http://www.powertech.no/smurf/">http://www.powertech.no/smurf/</a>
).<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><span
style='font-size:8.0pt;font-family:Verdana;
color:gray'>-----------------------------------------------------------
-------------------------------------------------------------<o:p></o:p
></span></p>
<h2>Position de d?fense</h2>
<p class=MsoNormal align=center
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:center'><span
style='font-size:8.0pt;font-family:Verdana;
color:gray'>-----------------------------------------------------------
-------------------------------------------------------------<o:p></o:p
></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p style='text-align:justify'><b><u><span
style='mso-bidi-font-size:8.0pt;
font-family:Verdana;color:gray'>I- Les parades
</span></u></b></p>
<p class=MsoBodyText>Il n'existe malheureusement pas de parade pour ce
genre
d'attaque, en effet on peut facilement d?tecter une attaque provenant
d'une
machine unique (correspondant ? une m?me adresse) et bloquer le flux
d'information en provenance de cette machine, mais il est tr?s difficile
de
distinguer, lorsque le flux est r?parti sur des centaines de machines,
une
attaque d'une demande de connexion en provenance d'un client r?el.
Cependant
lors d?une attaque utilisant le Smurfing, les ordinateurs envoyant
toutes les
requ?tes Pong auront les m?mes masks de sous-r?seaux. Il sera donc
possible
pour un administrateur r?seau t?moin d?une attaque de type Smurf
d?interdir
toutes les requ?tes provenant de ce mask de sous r?seau..</p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Mais il existe
une solution
pr?ventive toute simple qui permettra aux utilisateurs de Linux de ce
prot?ger
des attaques de types smurfing, et cela rien qu?en param?trant leurs
firewall
IPTABLES :<o:p></o:p></span></p>
<div align=center>
<table border=1 cellspacing=0 cellpadding=0 width=904
style='width:677.65pt;
margin-left:3.5pt;border-collapse:collapse;border:none;mso-border-alt:s
olid windowtext .5pt;
mso-padding-alt:0cm 3.5pt 0cm 3.5pt'>
<tr style='height:34.7pt'>
<td width=904 valign=top style='width:677.65pt;border:solid windowtext
.5pt;
background:#3366FF;padding:0cm 3.5pt 0cm 3.5pt;height:34.7pt'>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='color:red'>[root@...eluche /root]# </span><span
style='color:white'>iptables
-A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/second
-J
ACCEPT</span><span style='color:red'><o:p></o:p></span></b></p>
</td>
</tr>
</table>
</div>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><u><span
style='mso-bidi-font-size:8.0pt;font-family:Verdana;color:gray'>II-
Comment
utiliser les logs d?un server Cisco et de son ACL pour tracker
l?attaquant<o:p></o:p></span></u></b></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Etudions
maintenant ce
qu?un agress? doit savoir faire pour retrouver l?exp?diteur et ainsi la
source
de cette attaque :<o:p></o:p></span></p>
<p class=MsoBodyText>Il faut tout d?abord savoir que remonter ? la
source d?un
paquet spoofed est une chose plus que d?licate, elle n?cessite une
grande
coordinations des moyens des providers pour d?terminer l?agresseur.</p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Il faut savoir
qu?aujourd?hui il est possible de logger tous les paquets traversant
votre
r?seau et accept?s par votre </span><b><span
style='font-size:8.0pt;font-family:
Verdana;color:#999999'>ACL ( </span></b><b><span style='font-size:8.0pt;
mso-bidi-font-size:12.0pt;font-family:Verdana;color:#999999'>Access
Control
List ). </span></b><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Mais
quand une grande quantit? de paquets doit ?tres logg?, il faut savoir
que cela
peut cr?er une forme de chute de tension de votre CPU, c?est pourquoi il
me
semble normal que le syst?me de logs contre se genre d?attaque
aujourd?hui doit
?tre limit? qu?au petites attaques ( petite connections ) mais m?me dans
ce cas
si l?attaque est longue en temps le nombre de logs g?n?r?s par votre
routeur
pourra overload votre syst?me de logs de votre
serveur.<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Tout d?abord nous
allons
?tudi? les informations concernant le logging des routeurs
cisco.<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Si vous tapez
ceci dans
la configuration de votre ACL : ? access-list 101 permit icmp
any any
echo log-input ? votre syst?me de logs enregistra tous les paquets
de
pings ICMP quand ils sont envoy?s ? votre adresse Mac et votre
interface. <o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Un exemple de
logs pour
un ? multi-access ? r?seau :<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-GB
style='font-size:8.0pt;font-family:Verdana;color:gray;mso-ansi-language:
EN-GB'>Sep 10<span style="mso-spacerun: yes">?
</span>23 :17 :01
PDT : %SEC-6-IPACCESSLOGDP : List 101 permited icmp 10.0.7.30
(FastEthernet1/0 0060.3e2f.6e41) -> 10.30.248.3 (8/0), 5
packets<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Et ici un
exemple<span
style="mso-spacerun: yes">? </span>pour un r?seau ? point to
point ? :<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-GB
style='font-size:8.0pt;font-family:Verdana;color:gray;mso-ansi-language:
EN-GB'>Sep 10<span style="mso-spacerun: yes">?
</span>23 :17 :01
PDT : %SEC-6-IPACCESSLOGDP : List 101 permited icmp 10.0.7.30
(BRIO
*PPP*) -> 10.30.248.3 (8/0), 5 packets<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Nous ?tudierons
le
premi?re exemple, pour expliquer comment faire pour remonter ? partir de
?a. <o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Il signifie
que :<o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'>Le paquet est
venu sur
? Fast Ethernet1/0 ? de l?adresse MAC
? 0060.3<sup>e</sup>2f.6<sup>e</sup>41 ?
destin? ? l?adresse ? 10.30.248.3. ?. Pour d?terminer
l?adresse ip de
l?adresse MAC il vous suffit d?utiliser le protocole ARP et de taper
? show ip arp ? :<o:p></o:p></span></p>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>lapeluche#show
ip arp 0060.3e2f.6e41<o:p></o:p></span></b></p>
<table border=1 cellspacing=0 cellpadding=0
style='border-collapse:collapse;
border:none;mso-border-alt:solid windowtext .5pt;mso-padding-alt:0cm
3.5pt 0cm 3.5pt'>
<tr>
<td width=88 valign=top style='width:65.8pt;border:solid windowtext
.5pt;
padding:0cm 3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>Protocol
Adress<o:p></o:p></span></b></p>
</td>
<td width=88 valign=top style='width:65.8pt;border:solid windowtext
.5pt;
border-left:none;mso-border-left-alt:solid windowtext .5pt;padding:0cm
3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>Age
(min)<o:p></o:p></span></b></p>
</td>
<td width=109 valign=top style='width:81.65pt;border:solid windowtext
.5pt;
border-left:none;mso-border-left-alt:solid windowtext .5pt;padding:0cm
3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>Hardware
Addr<o:p></o:p></span></b></p>
</td>
<td width=88 valign=top style='width:65.8pt;border:solid windowtext
.5pt;
border-left:none;mso-border-left-alt:solid windowtext .5pt;padding:0cm
3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>Type<o:p></o:p></span></b></p>
</td>
<td width=111 valign=top style='width:83.0pt;border:solid windowtext
.5pt;
border-left:none;mso-border-left-alt:solid windowtext .5pt;padding:0cm
3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><b><span lang=EN-GB
style='mso-ansi-language:EN-GB'>Interface<o:p></o:p></span></b></p>
</td>
</tr>
<tr>
<td width=88 valign=top style='width:65.8pt;border:solid windowtext
.5pt;
border-top:none;mso-border-top-alt:solid windowtext .5pt;padding:0cm
3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><span lang=DE
style='mso-ansi-language:DE'>Internet<span
style="mso-spacerun: yes">? </span>10.0.183.65<span
style="mso-spacerun:
yes">??????????? </span><o:p></o:p></span></p>
</td>
<td width=88 valign=top
style='width:65.8pt;border-top:none;border-left:none;
border-bottom:solid windowtext .5pt;border-right:solid windowtext
.5pt;
mso-border-top-alt:solid windowtext .5pt;mso-border-left-alt:solid
windowtext .5pt;
padding:0cm 3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><span lang=DE
style='mso-ansi-language:DE'>32<o:p></o:p></span></p>
</td>
<td width=109 valign=top
style='width:81.65pt;border-top:none;border-left:
none;border-bottom:solid windowtext .5pt;border-right:solid windowtext
.5pt;
mso-border-top-alt:solid windowtext .5pt;mso-border-left-alt:solid
windowtext .5pt;
padding:0cm 3.5pt 0cm 3.5pt'>
<p class=MsoBodyText><span lang=DE
style='mso-ansi-language:DE'>0060.3e2f.6e41<span
style="mso-spacerun: yes">? </span><o:p></o:p></span></p>
</td>
<td width=88 valign=top
style='width:65.8pt;border-top:none;border-left:none;
border-bottom:solid windowtext .5pt;border-right:solid windowtext
.5pt;
mso-border-top-alt:solid windowtext .5pt;mso-border-left-alt:solid
windowtext .5pt;
padding:0cm 3.5pt 0cm 3.5pt'>
<p class=MsoBodyText>ARPA</p>
</td>
<td width=111 valign=top
style='width:83.0pt;border-top:none;border-left:
none;border-bottom:solid windowtext .5pt;border-right:solid windowtext
.5pt;
mso-border-top-alt:solid windowtext .5pt;mso-border-left-alt:solid
windowtext .5pt;
padding:0cm 3.5pt 0cm 3.5pt'>
<p class=MsoBodyText>FastEthernet1/0</p>
</td>
</tr>
</table>
<p class=MsoBodyText>Vous pouvez remarquez que l?adresse 10.0.183.65 est
l?endroit d?o? vient le paquets. Mais il vous faut un acces sur cette
machine
pour pouvoir ensuite faire la m?me chose est ainsi remonter jusqu??
l?attaquant.</p>
<p class=MsoBodyText>Article de Craig A. Huegen [chuegen@...drunner.com]
traduit et modifi? par Lapeluche.</p>
<p class=MsoBodyText><b><u>? Je vous conseil s?rieusement de lire
ses
travaux qui reste pour moi une source in?puisables de
connaissances ?<o:p></o:p></u></b></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<pre><![if !supportEmptyParas]> <![endif]><o:p></o:p></pre><pre>
</pre><pre><![if
!supportEmptyParas]> <![endif]><o:p></o:p></pre><pre><![if
!supportEmptyParas]> <![endif]><o:p></o:p></pre>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;font-family:Verdana;color:gray'><![if
!supportEmptyParas]> <![endif]><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;mso-bidi-font-size:12.0pt;font-family:Verdana;
color:white'><span style="mso-spacerun: yes">?</span></span><span
style='color:white'><o:p></o:p></span></p>
<p class=MsoNormal
style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:8.0pt;mso-bidi-font-size:12.0pt;font-family:Verdana;
color:white'>1.255.255.255 <entr?e> </span><span
style='color:white'><o:p></o:p></span></p>
<p class=MsoNormal><![if
!supportEmptyParas]> <![endif]><o:p></o:p></p>
</div>
</body>
</html>
Powered by blists - more mailing lists